Holy ceremony & celebration style transform (Seedance 2.0)

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a normal WeryAI video-generation skill, but it will use your WeryAI API key and send your prompts or selected image links to WeryAI.

Install only if you trust the publisher enough to give this skill a WeryAI API key. Review the generated prompt and settings before confirming, avoid confidential prompts or private image URLs, and consider using a dedicated/limited WeryAI account or key for this skill.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or premature invocation could spend WeryAI credits or use the wrong model, even though the skill tells the agent to confirm first.

Why it was flagged

The helper can submit paid generation jobs and relies on the caller following the model restriction and confirmation workflow rather than enforcing it in code.

Skill content
The script **does not** enforce this skill's allowed model in code: you **must** set `"model":"SEEDANCE_2_0"` ... Each `wait` run may consume credits
Recommendation

Before confirming, review the full prompt, model, duration, aspect ratio, resolution, and audio setting; keep the confirmation step mandatory.

What this means

Anyone who obtains or misuses the key could potentially submit tasks or consume credits on the associated WeryAI account.

Why it was flagged

The script uses WERYAI_API_KEY as a bearer token for WeryAI API calls, which is expected but grants access to the user's WeryAI account/credits.

Skill content
Authorization: `Bearer ${apiKey}`
Recommendation

Use a dedicated or limited WeryAI key if available, keep it out of project files, and revoke/rotate it if you no longer trust the environment.

What this means

Private or sensitive text included in prompts, or sensitive images made available by URL, may be processed by the external provider.

Why it was flagged

The skill sends user prompts and any selected public image URLs to the fixed WeryAI provider endpoint.

Skill content
Video tasks: `https://api.weryai.com` ... `prompt` | Required ... `image` | Public **https** URL
Recommendation

Do not submit confidential prompts or private media unless you are comfortable sharing them with WeryAI under its terms.

What this means

It may be harder to verify who maintains the skill or compare it against an upstream release.

Why it was flagged

The package does not provide an upstream source or homepage, which limits provenance assurance even though the included behavior appears purpose-aligned.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the bundled script before production use and prefer installing from a publisher/source you trust.